Privacy Policy

Dune is a business tool. The personal data it holds is about the people who use it — agency staff and client-side reviewers — not about consumers or audiences. Specifically: name, work email address, organisation and role, authentication records, and a log of actions taken in the application (who approved a plan, who commented on a line, who exported a report).

The campaign data itself — budgets, bookings, invoices, delivery figures — is commercial information about organisations rather than personal data, though it is protected with the same controls.

Campaign figures are entered by agency staff, uploaded as documents and spreadsheets, or synced automatically from advertising and commerce platforms that an account holder explicitly connects — currently Shopify, Meta Ads, Google Ads and Google Analytics 4.

These connections are authorised by the account holder and can be revoked at any time, both in Dune and from the platform's own settings. Dune requests read-only access. It retrieves aggregated figures — spend, impressions, clicks, conversions, and daily revenue totals — and deliberately does not store order-level, customer-level or audience-level records. Access credentials are encrypted before storage and are never displayed back to any user.

To operate the service: authenticating users, showing each organisation its own campaigns, producing plans, reports and exports, sending notification emails about activity the user is subscribed to, and maintaining an audit trail of changes.

Some features use an AI model to assist with document parsing, matching invoices or platform campaigns to plan lines, and drafting commentary. These are assistive: the model proposes, and a person confirms before anything is recorded. We do not use customer data to train models.

We do not sell personal data, and we do not use it for advertising or profiling.

Dune relies on a small number of subprocessors, each handling data only to deliver the service: Supabase (database, authentication and file storage), Vercel (application hosting), Anthropic (the AI features described above), Resend (notification email), and Sentry (error monitoring). Where a connector is enabled, the corresponding platform — Shopify, Meta, Google — is the source of the data rather than a recipient of it.

Campaign and financial records are retained for seven years by default, reflecting the commercial and tax retention expectations that apply to advertising records. Deleted records are first withdrawn from all views, then permanently erased once the retention window elapses. Account holders can request earlier erasure as described below.

You can request a copy of the personal data held about you, ask for it to be corrected, or ask for it to be erased. Dune implements both export and erasure directly, so these requests are fulfilled from the running system rather than reconstructed by hand.

Where an agency holds data about its own clients within Dune, that agency is the controller for it and we act as processor on their instructions; requests of that kind are passed to them.

To make a request, or to raise a concern about how data is handled, contact privacy@trymeridian.io.

Every record is scoped to its owning organisation at the database level, so one organisation's data cannot be read by another even if the application were to ask for it. Access is role-based, transport is encrypted, platform credentials are encrypted at rest with keys held outside the database, and access to production data is limited and logged.

If this policy changes materially we will update the date above and, where the change affects how personal data is used, notify account holders by email.

Meridian Systems LLC FZCO
privacy@trymeridian.io
This policy is governed by the laws of the United Arab Emirates.